adding basic, unsecure authentication